What is Amazon WorkSpaces Secure Browser?
Amazon WorkSpaces Secure Browser (formerly Amazon WorkSpaces Web) enables secure, browser-based access to internal websites, SaaS applications, and the internet. Users access a managed, isolated browser session in the AWS Cloud through their local browser.
The solution is particularly suited for BYOD scenarios and external workers who need secure access to corporate resources without a full virtual desktop. No endpoint agent or client software is required.
Core Features
- Secure Browser: Managed, isolated cloud browser session streamed to the endpoint
- No Client Required: Access through any modern web browser
- Data Loss Prevention: Control over downloads, uploads, and clipboard
- VPC Connectivity: Access to internal applications via VPC connection
- SSO Integration: Single sign-on with IAM Identity Center and SAML
Typical Use Cases
BYOD Security: External workers and contractors securely access corporate SaaS and internal applications without being able to download data to personal devices.
Secure Internet Research: Employees in security-sensitive areas (e.g., government, finance) use the isolated cloud browser for internet research or controlled access to generative AI tools.
Compliance-Conformant Access: Regulated industries grant controlled access to web applications with traceable audit trails and configurable data protection policies.
Benefits
- No client or agent required on endpoints
- Data never leaves the isolated cloud session
- More cost-effective than full virtual desktops
- Rapid deployment without endpoint management
Integration with innFactory
As an AWS reseller, innFactory supports you with Amazon WorkSpaces Secure Browser: security architecture, VPC connectivity, SSO integration, and policy configuration for secure browser access.
Typical Use Cases
Frequently Asked Questions
What is Amazon WorkSpaces Web called today?
The service is now officially branded Amazon WorkSpaces Secure Browser (formerly Amazon WorkSpaces Web). Functionality and API paths (workspaces-web) remain largely unchanged; only the marketing name changed.
What is the difference from regular Amazon WorkSpaces?
WorkSpaces Secure Browser provides only a secure browser, not a full desktop. Users access a managed, isolated browser session in the cloud through their local browser, which is more cost-effective and simpler than a full virtual desktop.
How is WorkSpaces Secure Browser billed?
Billing is per monthly active user (MAU) who accesses a portal during the month. The price includes a set number of streaming hours; additional hours are billed separately.
What security features does the service offer?
Data never leaves the isolated cloud session, downloads/uploads and clipboard access can be restricted, and the service supports IP access restrictions and single sign-on via AWS IAM Identity Center or SAML.
Can I access internal applications?
Yes. WorkSpaces Secure Browser can be connected to a VPC to access internal websites and applications. Combined with a web proxy or VPN gateway, you can also reach on-premises resources.
Note: All product information on this page has been compiled with care, but is provided without guarantee and may be outdated or incomplete. Cloud services evolve rapidly — features, pricing, SLAs, and availability change frequently. Authoritative and up-to-date information can only be found on the official product page of AWS (official documentation). This page does not represent an offer by AWS.